Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
File:                     6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft (raw, json)
Hash identifier:          88ZZqqzpkQTcrlwyIMuIghjVSUJRRXDdtvhS86LO8rM=
Subject key identifier:   2F:61:80:3D:AA:13:64:AB:FB:D2:AA:B1:25:46:A0:8A:3E:7D:D0:3F
Authority key identifier: E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D
Certificate issuer:       /CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
Manifest number:          0304
Signing time:             Sun 01 Mar 2026 22:46:05 +0000
Manifest this update:     Sun 01 Mar 2026 22:46:04 +0000
Manifest next update:     Sun 08 Mar 2026 22:46:04 +0000
Files and hashes:         1: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl (hash: FgLLqBIWUtr52T30Tre5S2ZJr385SUDsH2CR1abqwoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl
                          rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911954F, serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
        Validity
            Not Before: Mar  1 22:46:04 2026 GMT
            Not After : Mar  8 22:46:04 2026 GMT
        Subject: CN=69a4c1ac-03f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:e5:0c:27:0a:ab:b2:78:2b:a7:a7:1c:b1:
                    a5:b2:06:fb:97:83:1e:30:6c:65:dc:ca:f2:d1:f2:
                    33:94:ef:e6:14:57:4c:b1:ea:8c:40:50:1e:20:8a:
                    ec:ff:dc:d7:ff:54:17:3a:e6:c8:5c:c4:3b:9f:de:
                    89:fd:14:79:a0:67:37:40:7a:3d:3a:6c:c3:10:9e:
                    86:1b:22:f6:1d:f3:9c:06:86:2c:e4:23:09:58:ff:
                    56:9c:5a:b6:ff:a5:0a:85:d2:a8:ad:81:dd:a6:e3:
                    6e:d8:35:3e:97:ec:0a:09:70:f5:5d:a7:07:e9:0c:
                    8f:06:c8:2b:7b:c2:a7:2a:52:3f:d2:53:7b:5d:ef:
                    f7:e1:ac:ce:26:20:8e:ea:62:47:a3:13:4b:b7:e5:
                    37:a1:a3:90:36:4b:d2:6a:35:04:47:64:6f:f7:53:
                    45:f9:f5:c2:4f:71:97:9a:fd:ae:19:46:41:ff:11:
                    96:fb:9e:d4:f9:0e:24:51:61:b7:22:39:88:8f:9c:
                    24:b5:5c:b0:be:3b:14:e7:d2:1f:a0:24:2f:24:6b:
                    8d:ec:f6:51:4f:29:f9:59:7d:f5:b1:ed:78:c1:71:
                    fa:5d:99:b4:bd:a8:1f:3d:95:35:e6:8f:ca:a6:a5:
                    7a:07:a4:0a:b1:50:12:4f:4e:78:2a:f1:f8:0f:45:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:80:3D:AA:13:64:AB:FB:D2:AA:B1:25:46:A0:8A:3E:7D:D0:3F
            X509v3 Authority Key Identifier:
                keyid:E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:28:38:b2:5f:6d:ae:ad:3f:f9:55:2c:f1:40:4b:ed:a7:2b:
         5b:dd:e4:79:39:9b:bf:fe:cd:6e:8b:47:c5:d2:19:00:e3:b0:
         c1:fd:93:b4:fa:91:89:45:88:a0:e6:9b:22:33:01:26:4a:52:
         d6:50:57:a1:98:c7:7e:0a:aa:12:6b:0d:1d:0f:36:73:ad:3b:
         20:30:5d:1d:98:6f:b1:b5:c8:6d:b2:2e:6c:d4:ef:02:76:2a:
         bc:14:c8:5d:bf:99:20:6c:b2:ae:c5:d0:27:97:f0:01:18:0a:
         41:16:ea:23:fb:95:c8:b7:b0:5b:f8:c6:de:28:09:e0:a2:76:
         6c:1f:f6:cb:10:17:be:b4:46:78:58:23:ef:98:26:37:65:64:
         cc:d4:dc:4c:c0:e2:fe:fa:17:57:a4:59:36:76:f1:1e:99:17:
         a2:3e:8d:93:e6:0e:49:1e:11:e4:e8:95:f5:1f:be:50:d6:5a:
         be:58:a7:59:79:00:73:9b:e6:00:0f:e0:08:5e:25:c8:ae:2b:
         6c:d4:22:a4:e4:5c:c6:cf:b3:34:dd:ed:f1:be:35:b9:2d:70:
         cf:4b:09:46:7d:a1:77:13:b8:36:19:c5:bf:3b:3c:70:86:17:
         09:bf:7c:15:e1:4f:23:68:06:d9:f1:6d:6a:8d:6b:e8:92:c5:
         6a:d9:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:17 2026 by rpki-client